Qurouter

Vendor:

First CVE: Nov 22, 2024 · Active for 1 year

12
Total CVEs
More Total CVEs than 90% of tracked products
4.0
Avg CVEs / Year
Higher CVE frequency than 83% of tracked products
7.7
Avg CVSS
Higher Avg CVSS than 61% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Qurouter over time

Volume of CVEsAvg CVSS Base Score
First CVE
Nov 22, 2024
20 months ago
Most Recent CVE
Mar 20, 2026
128 days ago

CVE Severity & Scoring

Qurouter12 CVEs
All CVEs352,713 CVEs
MediumHighCritical
Attack Vector
Local6 (50.0%)
Network5 (41.7%)
Unknown0 (0.0%)
Physical1 (8.3%)
Adjacent Network0 (0.0%)
Attack Complexity
Low12 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None12 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low3 (25.0%)
High5 (41.7%)
None4 (33.3%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (12 CVEs).

12 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2024-50389CRITICAL
A SQL injection vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to inject malicious code. We have already fixed th
Dec 6, 20249.830NONO
CVE-2024-48860CRITICAL
An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow remote attackers to execute commands. We ha
Nov 22, 20249.830NONO
CVE-2025-62846MEDIUM
An SQL injection vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, they can then exploit the vulnerability to execute unauthorize
Mar 20, 20266.725NONO
CVE-2025-62843MEDIUM
An improper restriction of communication channel to intended endpoints vulnerability has been reported to affect QHora. If an attacker gains physical access, they can then exploit
Mar 20, 20266.825NONO
CVE-2024-50390CRITICAL
A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fi
Mar 7, 20259.825NONO
CVE-2025-29887HIGH
A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execut
Aug 29, 20257.224NONO
CVE-2025-62845MEDIUM
An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, they can then
Mar 20, 20266.723NONO
CVE-2024-48861HIGH
An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local network attackers to execute commands.
Nov 22, 20247.823NONO
CVE-2024-13088HIGH
An improper authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to compromise the sec
Jun 6, 20257.821NONO
CVE-2024-53700HIGH
A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute ar
Mar 7, 20257.221NONO
View all 12 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (12 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (12 CVEs).

Media Mentions

Signals from CVEs in this product scope (12 CVEs).

Top CNAs Publishing CVEs For Qurouter

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
2.6.2.00726.80.2%00
2.6.1.02846.40.2%00
2.6.0.68846.40.2%00
2.6.0.23946.40.2%00
2.5.0.26817.20.9%00
2.5.0.14017.20.9%00
2.4.6.02827.30.4%00
2.4.5.03237.20.7%00
2.4.4.10658.30.8%00
2.4.3.10368.20.8%00
2.4.2.53878.40.9%00
2.4.2.31778.40.9%00
2.4.1.63478.40.9%00
2.4.1.17278.40.9%00
2.4.0.19078.40.9%00